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(57) Abstract 



A smart canJ personalization system provides an interface to smart card personalization stations and to external computing or data 
resources which normally are not available directly to personalization station. A card issuer management system prepares card objects and 
assigns a unique card object identifier. A smart card personalization server receives the card objects from the card issuer management 
system. A smart card personalization controller receives the unique card object identifiers and routes the card object identifiers to waiting 
personalization stations. The personalization stations use the card object identifier to request data and services from the smart card 
personalization server in order to personalize the smart card. The services provided by the smart card personalization server includes 
data services, security services and support services. The smart card personalization server supports multiple active personalization station 
sessions. 
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Smart Card Personalization in a Multistation Environment 

5 Field of the Invention 

The present invention relates generally to data storage devices and more 
specifically to the control of smart card personalization in a multistation 
environment. 

Background of the Invention 

10 Increasing numbers of organizations which issue transaction cards to 

their users, customers, or employees require cards tailored to meet the 
requirements of their particular service or application. These organizations also 
want the cards to contain data about the cardholder. Existing transaction cards 
encode such data in a magnetic stripe on the back of the card but the amount of 

15 data that can be held by a magnetic stripe is limited. A new type of transaction 
card embeds a microprocessor computer chip in the plastic of the card to greatly 
increase the card's data storage capacity. Additionally, sophisticated card 
applications specific to the card issuer can execute in certain varieties of the 
chips, and the chip may also contain a type of operating system. Transaction 

20 cards with embedded chips are referred to in the industry as portable 

programmed data carriers, more commonly called "smart cards." The chip in a 
smart card is generally programmed with initialization and/or personalization 
data at the same time as the surface of the card is being embossed and/or printed. 
The initialization data comprises three major types of information: 

25 application data, security data, and printed data. The application data is common 
to all cards for a given card application and includes application program code 
and variables. The security data prevents fraudulent use of the card and is 
usually provided in the form of "secure keys." Printed data, such as a logo, bar 
codes, and various types of numerical information, are placed on the surface of 

30 the card. Some or all of the same data can also be embossed on the surface. 

Optical technology also can be employed to make part or all of the surface of the 
card into a storage medium with data accessible by an appropriate optical reader. 

Smart cards are also programmed with information specific to an 
individual cardholder through a process called "personalization." The 
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personalization information for a smart card is similar to the personalization 
information currently contained on non-smart cards, such as the cardholder's 
name, account number, card expiration date, and a photograph. Because of its 
increased storage capacity, the chip in a smart card can contain additional data 
5 beyond the basic information on the standard transaction card including a 

graphical representation of the individual's signature, data defining the types of 
service the cardholder is entitled to, and account limits for those services. 

Current systems from performing smart card initialization and/or 
personalization include a controller or a personal computer which is connected to 

1 0 a personalization station. All of the smart card progranuning data required for 
the personalization process is sent fi-om the controller or personal computer to 
the personalization station which programs the smart card. An application 
running on the personalization station controls the programming of the smart 
card. Many current personalization stations have a limited capacity to handle the 

15 increasingly sophisticated personalization process as the size and functionality of 
smart card computer chips increase. Such limitations include the memory, 
processing capacity, and buffer size of the personalization stations. 

In addition, personalization stations may require access to external 
resources which provide security services or access to card data. The external 

20 resources, particularly the security services, are expensive infrastructures to 
repeat for each personalization station. Also, communication between the 
personalization station and the external resource is limited by the speed of the 
communication link between them. In addition, the application development 
environment available on the personalization stations is often unique and lacking 

25 in development tools. 

Therefore, there is a need for a personalization system which overcomes 
the limitations on memory capacity and processing flexibility of current 
personalization stations. There is also a need for a personalization system which 
can share external resources between multiple personalization stations. 

30 Summary of the Invention 

The above-identified shortcomings as well as other shortcomings are 
addressed by the present invention, which will be understood by reading and 
studying the following specification. The invention is a computerized system for 
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controlling programming of portable programmed data carriers across a plurality 
of personalization stations. The system includes a personalization server 
interface for acquiring services from one of more resources, transferring card 
information to one of the personalization stations and controlling the 
5 programming of the portable programmed data carrier. The system also includes 
a personalization station interface for receiving the card information from the 
personalization server interface and for programming the portable progranmied 
data carrier. 

The invention also described is a method of controlling programming of 

10 portable programmed data carriers in a system having a plurality of 

programming stations. The method includes receiving one or more card objects 
from a card issuer management system. The card objects consist of information 
for programming the portable programmed data carriers. The method also 
includes receiving a programming request from the programming station and 

1 5 utilizing the card object to control the programming station as the programming 
station programs the portable programmed data carrier. 

Ahematively, the invention described is a computerized system which 
includes a means for receiving one or more card objects from a card issuer 
management system. The computerized system also includes a means for 

20 receiving a programming request from the programming station and a means for 
utilizing the card object to control the progranoming station as the programming 
station programs the portable programmed data carrier. 

The smart card personalization system uses a data structure comprising a 
data field representing a card object containing information for programming a 

25 portable programmed data carrier and an additional data field containing a 
unique card object identifier for identifying the card object. 

Therefore, the smart card personalization system of the present invention 
shares external resources between multiple personalization stations. Other 
aspects and advantages of the invention will become apparent by reference to the 

30 drawings and by reading the following detailed description. 
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Brief Description of the Drawings 

Figure 1 is a block diagram representing an embodiment of a smart card 
issuing process that incorporates a smart card personalization 
server of the present invention. 
5 Figure 2 is a functional block diagram of input and output connections for 
the embodiment of the smart personalization server of shown in 
Figure 1 . 

Figure 3 is a block diagram showing one embodiment of the smart card 
personalization software of the present invention. 
10 Figure 4 is a high level flow chart for one embodiment of software which 
implements the functions of the smart card personalization server. 
Description of the Embodiments 
In the following detailed description of the embodiments, reference is 
made to the accompanying drawings which form a part hereof, and in which is 
15 shown by way of illustration specific embodiments in which the invention may 
be practiced. These embodiments are described in sufficient detail to enable 
those skilled in the art to practice the invention, and it is to be understood that 
other embodiments may be utilized and that structural, logical and electrical 
changes may be made without departing from the spirit and scope of the present 
20 inventions. The following detailed description is, therefore, not to be taken in a 
limiting sense, and the scope of the present inventions is defined only by the 
appended claims. 

The leading digit(s) of reference numbers appearing in the Figures 
usually corresponds to the Figure number, with the exception that identical 
25 components which appear in multiple figures are identified by the same 
reference numbers. 

The system of the present invention utilizes a personalization server to 
control smart card personalization in an environment having a plurality of 
personalization stations. The personalization server provides an interface to a 
30 plurality of card personalization stations and to external computing or data 
resources which normally are not directly available to the card personalization 
stations or which are not cost efficient to replicate at each card personalization 
station. 
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The detailed description of this invention is divided into four sections. 
The first section provides an overview of one embodiment of a system for 
issuing smart cards which incorporates a smart card personalization server of the 
present invention. The second section describes the functional specifications for 
5 the software components of the example embodiment of the smart card 

personalization system. The third section illustrates an example commimication 
sequence between personalization station interface software and personalization 
server software for a smart card personalization process. The fourth section is a 
conclusion which includes a summary of the advantages of the present invention. 

10 Smart Card Personalization System Overview. Figure 1 illustrates 

components of a smart card issuing process that incorporates one embodiment of 
the smart card personalization server of the present invention. The smart card 
personalization server 100 receives card objects fi*om a card issuer management 
system 150. A smart card personalization controller 120 receives, from the card 

1 5 issuer management system 150, a card object identifier for each one of the card 
objects passed to the smart card personalization server 100. The smart card 
personalization controller 120 routes each one of the card object identifiers to 
one of a plurality of personalization stations 130. Each personalization station 
130 uses the card object identifier to request data and services fi-om the smart 

20 card personalization server 100 in order to personalize a smart card 160. 

The card issuer management system 150 manages the cardholder data 
and determines the type of card to issue, the card applications to embed in the 
card, and what personalization equipment to use to issue the card for a particular 
cardholder. 

25 The smart card personalization server 100 is illustrated in Figure 1 as a 

computer executing personalization server software as fiirther described below. 
The personalization server software executes under an operating system such as 
Unix, Windows 95®, or Windows NT®, and on industry-standard workstation 
and/or personal computer hardware. As described below, the smart card 

30 personalization server 100 provides an interface to card personalization stations 
130 and to external computing or data resources 180. 

The server 100 controls card printers, embossing devices, and integrated 
or add-on smart card interface devices collectively represented in Figure 1 as a 
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plurality of personalization stations 130. Personalization stations 130 also 
represent such devices as large volume card printer/embossers, small volume 
card printer/embossers, automatic teller machines (ATMs), point of sale 
terminals, unattended kiosks, personal computers, network computers, and 
5 on-line telecommunication devices. The physical connection between the 
devices and the smart card personalization server 100 varies according to the 
manufacturer and model of the device. Common industry standard connections 
include serial RS232, SCSI (Small Computer System Interface), Ethernet, and 
serial TTL (Transistor-Transistor Logic). In addition, some devices require a 

1 0 proprietary bus connection. 

The connections between the smart card personalization server 100 and 
the card management system 150 and the stations 130 can also be implemented 
through standard local area networks, wide area networks, dedicated phone lines,, 
or other remote communication infrastructure used to transfer data. Altemate 

15 connections will be apparent to those skilled in the art and are within the scope 
of the invention. 

Figure 2 is a block diagram of one embodiment of the smart card 
personalization system illustrating the logical input and output connections for 
the smart card personalization server 100. The cardholder data 202 input and 

20 maintained by the card issuing organization contains information about each 
individual cardholder, such as name, account number, card expiration date, and 
applicable services. The card issuer management system 150 assembles the data 
necessary for each card personalization job. The data for each job can be stored 
in a card object data store, such as a database, with each card object 208 

25 accessible by a unique card object identifier. A job can be, for example, a 
logical grouping of similar card objects. 

The card objects 208 contain, for example but not with limitation, data 
and commands for magnetic stripe encoding, embossing, printing, packaging and 
smart card personalization. An example card object is shown below. 
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Card Object 

EMB= "123456789", "Your Name", "1/1/1999" 
ENC=%B123456789^ Y/Name'^0101 1999?;123456789=0101 1999? 
PIC==www.photos.com/Y ourName 
5 SCRD=this_unique_card_object_identifier 

The example card object begins with an emboss instruction "EMB" followed by 
the corresponding cardholder data to be embossed on the card. The second line 
in the example card object shown above is an encode instruction "ENC" 

10 followed by the corresponding data to be corresponding cardholder data to be 
encoded on the magnetic strip of the card. The third line in the example card 
object is an instruction to print a picture on the card *TIC" followed by the 
location of the cardholder's picture. The fourth line in the example card object is 
smart card portion of the card object "SCRD". The smart card portion of the 

1 5 card object 208 consists of the unique card object identifier. 

The card issuer management system 1 50 passes the card object 208 to the 
smart card personalization server 100. The smart card personalization server 100 
expects the personalization data to be in a particular format. Because the card 
object 208 is in a format defined by the card issuer that often differs from the 

20 format(s) expected by the server 100, the card object 208 is translated by the 
server 100 when necessary. One method of translating the card object is 
described in U.S. Patent AppHcation serial number 08/755,459 entitled "System 
and Apparatus for Smart Card Personalization", filed on November 22, 1996. 
The smart card personalization server 100 provides an interface to 

25 external security services 204 and additional data sources 206 as needed to 
perform a smart card personalization job. The software program for the smart 
card personalization server 100 can be coupled to the data sources 206 through 
standard data query commands that provide access to the data stored in the data 
sources. The communication protocols between the software program for the 

30 smart card personalization server 100 and the extemal security services 204 and 
the data sources 206 vary depending upon the underlying data management 
system or security system employed. 
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The smart card personalization server 100 also provides an interface to 
each one of a plurality of card personalization stations 130. The smart card 
personalization controller 120 passes a card object identifier to one of the 
waiting personalization stations 130. The personalization station 130 presents 

5 the card object identifier to the server 100 in order to initiate access to the data 
services, security services or support services needed to complete the smart card 
personalization. Upon receiving the card object identifier from the 
personalization station 130, the smart card personalization server 100 translates 
the card object indicated by the card object identifier. The translation of the card 

10 object by the smart card personalization server 100 results in a sequence of 

commands and/or data which are passed to the personalization station 130. The 
personalization station 1 30 passes the commands and data received from the 
server 100 directly to the smart card 160. An example process demonstrating 
how the server 100 controls the actual card programming is described below. 

15 Personaiization Software Specifications, Figure 3 is a block diagram 

showing one embodiment of the smart card personalization server 1 00 of Figure 
2. The system of the present invention utilizes the personalization server 100 to 
control smart card personalization in an environment having a plurality of 
personalization stations 130 coupled to the personalization server 100. The 

20 personalization server 100 provides an interface to card personalization stations 
130 and to external computing or data resources 204, 206 as shown in Figure 2. 

An application executing on a card issuer management system 150 
prepares a card object 303 and assigns a card object identifier to each object. 
Information regarding the card objects is archived in a card object database 302 

25 until called upon by the personalization server 100 to personalize a smart card. 

The personalization environment of the present invention comprises two 
complimentary software components. The first is personalization station 
interface software 304 which executes in a processor of the personalization 
station 130. The second is personalization server software 305 executing in a 

30 processor in the personalization server 100 which processes the personalization 
card objects and utilizes both local and external resources. 

A initialization process 306 initiates a personalization job by initiating 
the personalization server 100 and optionally sending data, such as embossing or 
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magnetic stripe encoding data, to the personalization station 130. The 
personalization server software 305 serves multiple card personalization 
processes 308. Each card personalization process 308 represents a 
personalization job occurring at one of the personalization stations 130. Each 
5 card personalization process 308 is logically linked to one of the personalization 
stations 130. 

The personalization station interface software 304 presents the unique 
card object identifier to the personalization server software 305 to initiate access 
to services available through the server software 305, The personalization server 

10 software 305 obtains all of the necessary job information as well as the data 
elements to be used in personalization of the smart card. The personalization 
station interface software 304 performs the card personalization utilizing the 
services available to it through the personalization server software 305 as 
required until personalization is complete. At completion of the job, the 

15 personalization station interface software 304 is notified by the server software 
305 of completion. 

The services provided by the server software 305 include data services 
312, security services 310 and support services 314. The data services 312 
perform the acquisition of data for each personalization job and include any 

20 commonly available means of accessing data. The data services 312 retrieve 
data archived in the card object data base 302 on the card issuer management 
system 150 as well as from additional external data sources as shown in Figure 
2. The data can be in the form of files, databases, or data structures for example. 
The security services 310 interface with a variety of different external 

25 sources which provide security fimctions. The security fiinctions provided by 
the external sources include any commonly available means of securing 
information or limiting access to smart card chips until a required security 
condition is met. An example security function utilizes one or more "secure 
keys" that are programmed into the chip to prevent fraudulent use of the card, 

30 The appropriate secure key data is obtained by the smart card personalization 
server software 305 from secure key records maintained by the card issuer or an 
external security source and then transferred to the personalization station 
interface software 304. The security services 310 also provide security ftinctions 
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that can be used, for example, to ensure the integrity and secrecy of data during 
the transmission of data to and from the personalization station 130. 

The support services 314 perform processing tasks that in prior systems 
were performed by the personalization station 130 or were unable to be 
5 performed at all due to the limitations of the personalization stations. The 
support services 314 include any commonly used functions that can be shared 
between processes such as data conversions and validations for example. An 
example support service 314 is year 2000 date validation processing. An 
additional example of a support service 314 is formatting a ten digit string of 
10 numbers representing a telephone number so that the area code is in parentheses. 

The personalization server software 305 operates on a computer system 
which includes one or more high speed processors, data communications 
capability compatible with the target personalization stations, access to external 
resources such as security or file servers and a multitasking operating system. 
15 The smart card personalization processes 308, identified as components of the 
personalization server software 305, utilize their own virtual memory and share 
resources as appropriate through threading or other common techniques well 
known to one skilled in the art. 

In summary, the personalization server software moves the processing 
20 tasks for initialization and personalization of smart cards from the 

personaUzation station to the personahzation server. The personalization station 
interface software is responsible for servicing individual commands from the 
personalization server software. 

Personalization Software Communication Process. Figure 4 
illustrates the communication sequence between the personalization station 
interface software 304 and the personalization server software 305 in order to 
complete personalization of a smart card. The smart card personalization 
process begins at stage 402 when the personalization station interface software 
304 receives a unique card object identifier from the smart card personalization 
controller as shown in Figure 2. At stage 404, the personalization station 
interface software 304 requests the commands and data necessary to personalize 
the card by passing the card object identifier to the server software 305. Upon 
receiving the card object identifier, the server software 305 starts a 
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personalization session with the personalization station interface software 304 at 
stage 406, 

Based on the card object identifier, the server software 305 retrieves and 
sends the data and commands unique to the card being personalized to the 
5 personalization station interface software 304 at stage 408. The data and 
commands are retrieved locally from the smart card personahzation server or 
from additional external data sources as shown in Figure 2 including, for 
example, the card issuer management system 150. 

In one embodiment, the personalization station interface software 304 is 

10 idle at stage 410 until it receives the commands and data from the 

personalization server software 305. Upon receiving the commands and data, the 
personalization station interface software 304 passes the commands and data 
directly to the smart card and returns data and/or status signals to the server 
software 305 as an acknowledgement at stage 412. An example of the data 

15 returned by the personalization station interface software 304 is a serial number 
unique to the card and a random number. The data in such case can be used as 
part of a function provided by a security service such as an authentication 
algorithm. At stage 414, the server software 305 processes the status signals 
and/or data returned by the personalization station interface software 304. 

20 For example, at stage 408 the server software 305 sends a "select" 

command. The personalization station interface software 304 is idle at stage 410 
until it receives the "select" command from the server. At stage 412, the 
personalization station-interface software 304 passes the "select" command on to 
the smart card and returns a status signal as an acknowledgement to the server 

25 software 305. After receiving the acknowledgment at stage 414, the server 

software 305 sends a "write" command and associated data to the personalization 
station interface software 304 at stage 408. The personalization station interface 
software 304 is idle at stage 410 until it receives the "write" command from the 
server software 305. At stage 412, the personalization station passes the "select" 

30 command on to the smart card and retums a status signal as an acknowledgement 
to the server software 305. The loop from stage 408 to stage 410 to stage 412 to 
stage 414 continues until the personalization is complete. 
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Upon completion of the personalization of the smart card, the server 
software 305 sends a "format complete" command to the personalization station 
interface software 304 at stage 416. The personalization station interface 
software 304 is idle at stage 418 until it receives the "format complete" 
5 command from the server software 305, At stage 420 the personalization station 
interface software 304 sends an acknowledgement of the "format complete" 
command to the server software 305 and to the smart card. The personalization 
process is complete at stage 422 when the server software 305 receives the 
acknowledgement. 

1 0 Conclusion. In summary, the system of the present invention utilizes a 

personalization server to control smart card personalization in an environment 
having a plurality of personalization stations. The personalization server 
provides an interface to a plurality of card personalization stations and to 
external computing or data resources which normally are not directly available to 

1 5 the card personalization stations or which are not cost efficient to replicate at 
each card personalization station. The personalization server off-loads the 
processing of tasks for initialization and personalization of smart cards from the 
personalization station to the personalization server. The personalization station 
is responsible for servicing individual commands from the personalization 

20 server. 

An advantage of the present invention is that the personalization server 
can support multiple active personalization station sessions. An additional 
advantage is that the programming logic required in the personalization station is 
reduced to that of managing data transfers. 

25 Other mechanisms for control of the smart card personalization process 

will be apparent to those skilled in the art. It is to be understood that the above 
description is intended to be illustrative, and not restrictive. Many other 
embodiments will be apparent to those of skill in the art upon reviewing the 
above description. The scope of the invention should, therefore, be determined 

30 with reference to the appended claims, along with the full scope of equivalents to 
which such claims are entitled. 
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What is claimed is: 

1 . A method of controlUng programming of portable programmed data 
carriers in a system having a plurahty of personalization stations, the method 

5 comprising: 

receiving a card object from a card issuer management system, wherein 
the card object consists of information for programming the portable 
programmed data carriers; 

receiving a programming request from one of the personalization 
1 0 stations; and 

utilizing the card object to control the personalization station as the 
personalization station programs the portable programmed data carrier. 

2. The method of claim 1, further comprising acquiring data from a data 
1 5 source. 

3. The method of claim 2, wherein the data source is the card issuer 
management system. 

20 4. The method of claim 1 , further comprising acquiring security services 
from a security source. 

5. The method of claim 1 , further comprising providing support services. 

25 6. The method of claim 1, wherein receiving a programming request 
comprises: 

receiving a card object identifier; and 

associating the card'object identifier with the card object. 

30 7. The method of claim 2, further comprising acquiring security services 
from a security source. 

8. The method of claim 7, fiirther comprising providing support services. 
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9. The method of claim 8, wherein receiving a programming request 
comprises: 

receiving a card object identifier; and 

associating the card object with the card object identifier. 

5 

10. A computerized system for controlling programming of portable 
programmed data carriers across a plurality of personalization stations, the 
system comprising: 

a personalization server interface for acquiring services from one of more 
10 resources, transferring card information to one of the personalization stations, 
and controlling the programming of the portable programmed data carriers; and 

a personalization station interface for receiving the card infonnation from 
the personalization server interface and for programming one of the portable 
programmed data carriers. 

1 1 . The computerized system of claim 1 0, wherein the services acquired by 
the personalization server interface are data services. 

12. The computerized system of claim 10, wherein the services acquired by 
the personalization server interface are security services. 

13. The computerized system of claim 10, wherein the services acquired by 
the personalization server interface are support services. 

14. The computerized system of claim 10, further comprising a controller for 
receiving a card object identifier and for routing the card object identifier to one 
of the personalization stations. 

15. A computerized system for controlling programming of portable 
programmed data carriers across a plurality of personalization stations, the 
system comprising: 
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means for receiving one or more card objects from a card issuer 
management system, wherein the card objects comprise information for 
programming the portable programmed data carriers; 

means for receiving a programming request from the personalization 
5 station; and 

means for utilizing the card object to control the personalization station 
as the personalization station programs the portable programmed data carrier. 

1 6. The computerized system of claim 1 5, further comprising means for 
10 acquiring security services from a security source. 

17. The computerized system of claim 1 5, further comprising means for 
acquiring data from a data source. 

15 18. The computerized system of claim 1 7, wherein the data source is the card 
issuer management system. 

19. The computerized system of claim 1 5, further comprising means for 
providing support services. 

20 

20. The computerized system of claim 1 5, wherein the programming request 
comprises a unique card object identifier. 

21. A computer-readable medium having computer-executable instructions 
25 stored thereon for causing a computer to perform a method of controlling 

programming of portable programmed data carriers, the method comprising: 

receiving one or more card objects from a card issuer management 
system, wherein the card objects consist of information for programming the 
portable programmed data carriers; 
30 receiving a programming request from one of the personalization 

stations; and 

utilizing the card object to control the personalization station as the 
personalization station programs the portable programmed data carrier. 
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22. The computer-readable medium of claim 21, having further computer- 
executable instructions for acquiring security services from a security source. 

23. The computer-readable medium of claim 2 1 , having further computer- 
5 executable instructions for acquiring data from a data source. 

24. The computer-readable medium of claim 23, wherein the data source is 
the card issuer management system. 

10 25 . The computer-readable medium of claim 2 1 , having further computer- 
executable instructions for providing support services. 

26. A computer readable medium having stored thereon a data structure 
comprising: 

15 a first data field containing data representing a card object for 

programming a portable programmed data carrier; and 

a second data field containing data representing a unique card object 
identifier for identifying the card object represented by the first data field. 

20 27. A system for issuing portable programmed data carriers comprising: 
a plurality of card objects identified by a like plurality of card object 
identifiers; 

a plurality of personalization stations for receiving the card object 
identifiers and for programming the portable programmed data carriers using 
25 information contained in the card object identified by the card object identifier; 

a controller for providing to each personalization station the card object 
identifier; and 

a personalization server for controlling the programming of a portable 
programmed data carrier in response to a request from one of the personalization 
30 stations, wherein the personalization server translates the card object into 

commands and data and transfers the commands and data to the personalization 
stations making the request. 
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28. The system of claim 27, wherein the personalization server acquire 
services from one or more resources in response to a request from one of the 
personalization stations. 

5 29. A method of programming a portable programmed data carrier in a 
system having a server and a personalization station, the method comprising: 
receiving, by the personalization station, a card object identifier; 
requesting, by the personalization station, from the server, information 
for programming the portable programmed data carriers; and 
1 0 programming, by the personalization station, the portable programmed 

data carrier under the control of the server. 

30. A method of controlling programming of portable programmed data 
carriers in a system having a server and a plurality of personalization stations, 
1 5 the method comprising: 

receiving, by the server, a card object from a card issuer management 
system, wherein the card object consists of information for programming the 
portable programmed data carriers; 

receiving, by the server, a programming request from one of the 
20 personalization stations; and 

utilizing, by the server, the card object to control the personalization 
station as the personalization station programs the portable programmed data 
carrier. 

25 31. The method of claim 30, further comprising acquiring data by the server 
from a data source. 

32. The method of claim 3 1 , wherein the data source is the card issuer 
management system. 

30 

33. The method of claim 30, further comprising acquiring security services 
by the server from a security source. 
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34. The method of claim 30, further comprising providing support services 
by the server. 

35. The method of claim 30, wherein receiving, by the server, a 
5 programming request comprises:, 

receiving a card object identifier; and 

associating the card object identifier with the card object. 
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